Protecting Personal Information through Information Security Management and Certification
First written in FY2016. 3 of 5 entries say "Restated". Latest entry: FY2022.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2022AdvancedAnnual report
「Since building its customer databases, the group has implemented security measures, including centralized management of access logs, to address unauthorized external access and the leakage of customer information from within the group. In addition, as a company responsible for handling large databases, it has introduced data-server redundancy, semi-permanent retention of access records, a fingerprint-based entry and exit management system, surveillance cameras and other measures to build a more robust security framework.」
In addition to conventional 24-hour, 365-day monitoring, ISMS and the Privacy Mark, the disclosure describes specific measures including server redundancy, retention of access records, fingerprint authentication and surveillance cameras. - FY2019RestatedAnnual report
「In particular, to handle personal information directly and centrally manage the internal network, the group has established a high-security area with a 24-hour, 365-day management and monitoring system. The company’s Administration Headquarters and the Operations Promotion Headquarters of its group company 株式会社ネクシィーズ have obtained certification under the international information security management system standard “ISO/IEC 27001:2013” and the domestic standard “JIS Q 27001:2014.” In addition, 株式会社ブランジスタ has obtained Privacy Mark certification.」
Efforts to protect personal information through 24-hour, 365-day monitoring, ISMS, the Privacy Mark, access management and other measures continue to be disclosed. - FY2018RestatedAnnual report
「The company’s Administration Headquarters and the Operations Promotion Headquarters of its group company 株式会社ネクシィーズ have obtained certification under the international information security management system standard “ISO/IEC 27001:2013” and the domestic standard “JIS Q 27001:2014.”」
Efforts to protect personal information through ISMS certification, the Privacy Mark, 24-hour, 365-day monitoring, access management and other measures continue to be disclosed. - FY2017RestatedAnnual report
「In particular, to handle personal information directly and centrally manage the internal network, the group has established a high-security area with a 24-hour, 365-day management and monitoring system, and has introduced predictive dialers (automated telephone dialing systems) in all operation booths to prevent connections to the internet and various software and hardware.」
The measures of 24-hour, 365-day monitoring, a high-security area, connection restrictions, ISMS, the Privacy Mark and other controls continue to be disclosed. - FY2016First statedAnnual report
「In particular, to handle personal information directly and centrally manage the internal network, the group has established a high-security area with a 24-hour, 365-day management and monitoring system, and has introduced predictive dialers (automated telephone dialing systems) in all operation booths to prevent connections to the internet and various software and hardware.」
The disclosure describes specific measures for protecting personal information, including 24-hour, 365-day monitoring, connection restrictions, ISMS and the Privacy Mark.